[lxc-users] Mount additional storage into unprivileged container

[Andriy Tovstik]

Hi, all!



I am learning LXC features because we are going  to implement it in our
production environment.

Could somebody explain me is there any well documented way to mount
additional filesystems or (preferable) block devices into Unprivileged
containers? is it supports live migration of container?

I've read a lot of articles and man pages but unfortunatly this question is
still unclear for me...



Currently my config looks like:



name: test-container

profiles:

- default

config:

  raw.lxc: lxc.aa_profile=unconfined

*  security.privileged: "true"*

  volatile.base_image:
a19c9ae2bd2e7bf99b0e2d31a0707cc534781a4eba47f44f172f486d2e01c96b

  volatile.eth0.hwaddr: 00:16:3e:87:d6:d9

  volatile.last_state.idmap: '[]'

devices:

  data:

    path:  /datastorage

    source: /dev/sdf

    type: disk





But when I try to change security.privileged to ‘false’ I lost an ability
to write to /datastorage path inside container.



Currently I’m using version 2.0.5 of LXC


-- 
WBR, Andriy Tovstik
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20161108/8e0d3186/attachment-0001.html>